Medium severity4.8NVD Advisory· Published Aug 2, 2021· Updated Jun 17, 2026
CVE-2021-24481
CVE-2021-24481
Description
The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Any Hostnamedescription
- Range: <=1.0.6
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/a4c352de-9815-4dfe-ac51-65b5bfb37438nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.